Package: tcpxtract (1.0.1-15)

[ Source: tcpxtract  ]

extract files from network traffic based on file signatures

tcpxtract is a fast console tool to extract files from network traffic based on file headers and footers and its patterns (so called carving).

Currently, 26 file formats are supported out of the box by tcpxtract but new formats can be added without problems. Foremost configurations are simple to convert to tcpxtract configuration files.

tcpxtract uses libpcap. So, it can read network dumps generated by tcpdump or wireshark or similar programs. tcpxtract is useful in network auditing and for forensics investigations.

Tags: System Administration: Monitoring, Implemented in: C, User Interface: interface::commandline, protocol::ethernet, Role: Program, Scope: scope::utility, security::log-analyzer, Purpose: Monitoring

Other Packages Related to tcpxtract

• dep: libc6 (>= 2.14) [amd64]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.17) [arm64, ppc64el]

  dep: libc6 (>= 2.7) [not amd64, arm64, ppc64el]

• dep: libfl2 (>= 2.5.33)

  SHARED library for flex (a fast lexical analyzer generator)

• dep: libpcap0.8 (>= 0.9.8)

  system interface for user-level packet capture

Download tcpxtract

Download for all available architectures

Architecture	Package Size	Installed Size	Files
amd64	17.2 kB	56.0 kB	[list of files]
arm64	16.4 kB	52.0 kB	[list of files]
armel	15.4 kB	47.0 kB	[list of files]
armhf	15.2 kB	43.0 kB	[list of files]
i386	17.4 kB	55.0 kB	[list of files]
mips64el	17.6 kB	62.0 kB	[list of files]
mipsel	17.0 kB	53.0 kB	[list of files]
ppc64el	18.3 kB	88.0 kB	[list of files]
s390x	16.3 kB	52.0 kB	[list of files]